Missing Authorization

Overview org.apache.nifi:nifi-framework-cluster is a clustering software for NiFi. Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to...

org.apache.nifi:nifi-framework-kubernetes-nar (>=2.0.0-m3, <=2.0.0), org.apache.nifi:nifi-framework-nar (>=2.0.0-m3, <=2.0.0) +13 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-framework-cluster (>=2.0.0-m1, <=2.0.0)

org.apache.nifi:nifi-framework-cluster MAVEN version =2.0.0-m1, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m1, =2.0.0-m4, =2.0.0-m3, =2.0.0-m3, =2.0.0-m3, =2.0.0-m4 - org.apache.nifi:nifi-web-error 2.0.0-m3 - org.apache.nifi:nifi-web-frontend 2.0.0-m3 -...

com.trigyn:java-web-starter (>=1.6.0, <=2.1), com.wavemaker.runtime:wavemaker-app-runtime-core (>=11.9.0, <=11.9.5.ee) +22 more potentially affected by CVE-2026-41003 via org.springframework.security:spring-security-saml2-service-provider (>=6.3.1, <=6.3.6)

org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.3.1, =1.6.0, =11.9.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0-m4, =2.0.0 and more Source cves: CVE-2026-41003 Source advisory:...

be.atbash.config:atbash-config-client (0.9.1), be.atbash.config:config-server (>=0.9.0, <=0.9.1) +18 more potentially affected by CVE-2025-53864 via com.nimbusds:nimbus-jose-jwt (5.7)

com.nimbusds:nimbus-jose-jwt MAVEN version 5.7 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - be.atbash.config:atbash-config-client 0.9.1 - be.atbash.config:config-server =0.9.0, =0.3, =0.3, =0.3,...

org.apache.nifi:nifi-cluster-authorization-provider (0.4.1), org.apache.nifi:nifi-framework-cluster (0.4.1) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.4.1)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.4.1 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.2.0-incubating), org.apache.nifi:nifi-framework-cluster (0.2.0-incubating) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.2.0-incubating)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.2.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider...

org.apache.nifi:nifi-cluster-authorization-provider (0.0.1-incubating), org.apache.nifi:nifi-framework-cluster (0.0.1-incubating) +5 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.0.1-incubating)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.0.1-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider...

org.apache.nifi:nifi-cluster-authorization-provider (0.7.2), org.apache.nifi:nifi-framework-cluster (0.7.2) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.7.2)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.7.2 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.6.0), org.apache.nifi:nifi-framework-cluster (0.6.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.6.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.6.0 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.4.0), org.apache.nifi:nifi-framework-cluster (0.4.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.4.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.4.0 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.5.0), org.apache.nifi:nifi-framework-cluster (0.5.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.5.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.5.0 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.3.0), org.apache.nifi:nifi-framework-cluster (0.3.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.3.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.3.0 -...

org.apache.nifi.minifi:minifi-c2-assembly (>=0.2.0, <=0.3.0), org.apache.nifi.minifi:minifi-c2-provider-nifi-rest (>=0.2.0, <=0.3.0) +17 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (>=0.0.1-incubating, <=1.4.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version =0.0.1-incubating, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.0-beta, =0.0.1-incubating, =1.0.0-beta, =0.0.1-incubating, =0.0.1-incubating, =0.0.1-incubating, =0.0.1-incubating, =1.2.0, =1.4.0 and more Source cves:...